Senior Data Scientist, Active TS/SCI - Cyber SOC Lead

Peraton; Chandler (AZ); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton seeks a Data Scientist with active TS/SCI clearance to join the Federal Strategic Cyber group in Chandler, AZ or Washington, DC. You will design and operationalize advanced analytics and ML solutions to enhance threat detection and SOC automation.

The role provides technical leadership, translates security data into actionable insights, and collaborates with threat hunters, engineers, and SOC analysts to operationalize analytics and produce briefings for leadership.

Qualifications

• Bachelor's degree with minimum 8 years experience, additional 4 years may substitute.
• Minimum of 7 years Intelligence experience with IC management or supervision.
• Knowledge of MITRE ATT&CK, D3FEND, Diamond Model, Kill Chain frameworks.
• Certifications such as CISM, CySA+, GCIA, CFR, Network+, Security+, or CEH.
• U.S. citizenship and active TS/SCI security clearance.

Responsibilities

• Design, develop, and deploy ML models to improve SOC alert fidelity and response.
• Analyze large telemetry from SIEM, SOAR, EDR, networks, and cloud platforms.
• Build data pipelines, feature engineering and model validation workflows.
• Integrate analytics into SOC tools using Docker- and Kubernetes-based architectures.
• Provide technical leadership and mentor data science and analytics personnel.
• Collaborate with SOC analysts, threat hunters, and engineers to operationalize insights.

Skills

ML/AI

Security analytics

Python

Data engineering

Docker/Kubernetes

Threat intel

Education

Bachelor's degree in a related field

Tools

SIEM

SOAR

EDR

Docker

Kubernetes

Job description

Peraton seeks a Data Scientist with active TS/SCI clearance to join the Federal Strategic Cyber group in Chandler, AZ or Washington, DC. You will design and operationalize advanced analytics and ML solutions to enhance threat detection and SOC automation.

The role provides technical leadership, translates security data into actionable insights, and collaborates with threat hunters, engineers, and SOC analysts to operationalize analytics and produce briefings for leadership.